Re: [fw-wiz] Firewalls that generate new packets..

Darren Reed wrote:
If I can run IPoverDNS through your "layer 7 firewall", is it
really being a "layer 7 firewall" or a "layer 5 firewall"?

I don't think that covert channels can be eliminated in the
context of "firewall" -- after all, a "firewall" is just one big
juicy mess of overt channels. :)


firewall-wizards mailing list